Live findsCVE IntelConsoleStart free
huntback / IP intelligence

8.133.234.121

DATACENTERoperator-submittedloot-ipexposed-secretopen-directoryelf-binaryexploit

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 443, 1234, 7000, 8082, 8898, 9090, 4444, 8888, 1099, 1100, 1883, 7555, 8024, 8899, 9003
Productsnginx
JARM27d27d27d00000000042d42d0000001f361a1bf80ed39a1e352adeb016a07b
Loot harvested216 file(s), 78039 KB · elf-binary, exploit, exposed-secret, forced-loot, macho-binary, malware

Open directory contents (216)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
frps_0.51.3.bakBAK17.6 MB
ffufELF7.8 MB
remote4.zipZIP6.1 MB
OpenSSH-Win64.zipZIP5.4 MB
agentELF5.2 MB
vc.gzGZ5.0 MB
‹redacted›.outOUT4.8 MB
hits.logLOG4.2 MB
‹redacted›.jarJAR3.4 MB
scrm-reports-20260625.zipZIP2.5 MB
scrm-reports-0625.zipZIP2.5 MB
scrm-reports-0623.zipZIP2.5 MB
exploitELF1.6 MB
hits.logLOG1.3 MB
http8899.logLOG686 KB
log4j_1234.logLOG677 KB
‹redacted›.jarJAR655 KB
p6b.exePE500 KB
p6.exePE498 KB
tst.exePE487 KB
p6d.exePE477 KB
p6c.exePE471 KB
‹redacted›.jarJAR252 KB
http8898.logLOG232 KB
BAD_GARBAGE.cC126 KB
‹redacted›.jarJAR125 KB
‹redacted›.jarJAR120 KB
‹redacted›.jarJAR87 KB
lib_fault.cC69 KB
gp.exeEXE56 KB
e4.exePE53 KB
e3.exePE52 KB
e2.exePE52 KB
elev.exePE51 KB
exp2.soELF42 KB
run_smc_client.shSH40 KB
exp.soELF38 KB
redismodule.hH31 KB
.bash_historyBASH_H28 KB
dirtypt.cC27 KB
ps64.exeEXE26 KB
frps.logLOG25 KB
race.cC23 KB
offset.cC20 KB
fjpoc-src.tgzTGZ16 KB
lib_slubfw.cC15 KB
smc_import.logLOG14 KB
kallsysms.cC13 KB
pagemap.cC12 KB
config.yamlYAML10 KB
emqx_listener.logLOG9 KB
sstd.cC9 KB
lib_slubfw.hH8 KB
xattr.cC8 KB
README.mdMD7 KB
final.logLOG7 KB
p6d.cC7 KB
shell.cC7 KB
offset.hH7 KB
http.logLOG6 KB
cf.logLOG6 KB
http.logLOG6 KB
shell_raw.logLOG6 KB
lib_fault.hH5 KB
elev3.cC5 KB
p6c.cC5 KB
dirtypt.hH5 KB
p6b.cC4 KB
elev.cC4 KB
elev2.cC4 KB
‹redacted›.sampleSAMPLE4 KB
elev4.cC4 KB
‹redacted›.sampleSAMPLE4 KB
p6.cC4 KB
‹redacted›.classMACHO4 KB
‹redacted›.classMACHO4 KB
pagemap_pml5.cC4 KB
module2.cC4 KB
rogue_ldap.pyPY4 KB
pagemap_pml4.cC3 KB
pagemap.hH3 KB
race.hH3 KB
‹redacted›.sampleSAMPLE3 KB
install-claude.ps1PS13 KB
xattr.hH3 KB
emqx_pivot.logLOG2 KB
‹redacted›.sampleSAMPLE2 KB
‹redacted›.classMACHO2 KB
rogue.pyPY2 KB
‹redacted›.classMACHO2 KB
README.mdMD2 KB
verify-local.shSH2 KB
jdk21_sb27_parse_ssrf_only.txtTXT2 KB
deploy_https.shSH2 KB
pagemap_impl.hH2 KB
‹redacted›.sampleSAMPLE2 KB
‹redacted›.classMACHO2 KB
catch4444.pyPY2 KB
shell.hH2 KB
‹redacted›.classMACHO1 KB
issue_cert.shSH1 KB
issue_cert_v4.shSH1 KB
module.cC1 KB
server_https_17397.jsJS1 KB
server_https_patched.jsJS1 KB
dbdump.shSH1 KB
fix-claude.ps1PS11 KB
serve_probe.pyPY1 KB
serve_evil.pyPY1 KB
t443.keyKEY1 KB
putserver2.pyPY1 KB
‹redacted›.xmlXML1 KB
‹redacted›.sampleSAMPLE1 KB
pair2.pyPY1 KB
issue4.logLOG1 KB
2026-08-22T01_53_55_864Z-debug-0.logLOG1 KB
‹redacted›.sampleSAMPLE1 KB
serve_probe_vps.pyPY1 KB
multi5556.pyPY1 KB
pair.pyPY1 KB
emqx_pivot_20261016_final.logLOG1 KB
kallsysms.hH1 KB
dbdump2.shSH1 KB
‹redacted›.sampleSAMPLE1 KB
setup.shSH1 KB
ssrf_hits.logLOG1 KB
server.logLOG1 KB
ssrf_listen.pyPY1 KB
rattack.jsJS1 KB
rattack2.jsJS1 KB
setup_systemd.shSH1 KB
issue.logLOG1 KB
t443.crtCRT1 KB
recv.pyPY1 KB
node_final.jsJS1 KB
‹redacted›.jarJAR1 KB
pgrce.shSH1 KB
putserver.pyPY1021 B
pglo.shSH1007 B
pglo2.shSH989 B
stability-check.shSH983 B
server_https.jsJS970 B
deep1.shSH969 B
fetch-deps.shSH968 B
build-harness.shSH901 B
‹redacted›.sampleSAMPLE896 B
pgshell.shSH895 B
pgenum.shSH889 B
jdk8_sb27_parse.txtTXT861 B
scan2.shSH834 B
server.jsJS798 B
scan.shSH792 B
mytest.shSH754 B
‹redacted›.jarJAR753 B
‹redacted›.jarJAR749 B
‹redacted›.jarJAR749 B
‹redacted›.jarJAR749 B
LICENSETXT710 B
rev9001.pyPY672 B
pgegress.shSH645 B
t80.pyPY619 B
pgtest.shSH617 B
test_attack.shSH606 B
‹redacted›.sampleSAMPLE544 B
log4j_callback_1234.pyPY489 B
pgegress2.shSH484 B
‹redacted›.sampleSAMPLE478 B
procs.shSH447 B
pgvc2.shSH444 B
test443.shSH441 B
cmd.shSH432 B
‹redacted›.sampleSAMPLE424 B
‹redacted›.sampleSAMPLE416 B
pgvc.shSH411 B
start_listener.shSH402 B
rattack3.shSH396 B
pgvc3.shSH346 B
MakefileTXT339 B
pgvc4.shSH326 B
configTXT309 B
‹redacted›.outOUT305 B
configTXT299 B
common.shSH272 B
excludeTXT240 B
rev9001.logLOG237 B
configTXT234 B
frpc.iniINI207 B
shell5555.logLOG204 B
‹redacted›.sampleSAMPLE189 B
java-opts.envENV173 B
._.gitGIT163 B
HEADTXT157 B
oob_loop.shSH150 B
requirements.txtTXT129 B
loot_oob.logLOG116 B
packed-refsTXT112 B
multi5556.logLOG107 B
poc_17397.logLOG95 B
poc_patched.logLOG95 B
rcTXT93 B
t39001.logLOG78 B
.gitignoreGITIGN76 B
descriptionTXT73 B
payload_integer_ip.jsonJSON57 B
payload.jsonJSON56 B
configTXT46 B
shallowTXT41 B
vc_get.exeEXE36 B
.gitignoreGITIGN32 B
HEADTXT21 B
rr2g.logLOG17 B
t80.logLOG13 B
test.txtTXT7 B
vc2.exeAPP5 B
configTXT3 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
101.42.136.73confirmed
102.204.222.159confirmed
102.209.224.40confirmed
102.210.149.166confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.35.216.13confirmed
103.46.185.169confirmed
104.21.30.58confirmed
108.61.219.168confirmed
109.122.196.149confirmed
110.93.250.7confirmed
111.223.247.165confirmed